Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/0f722f8f-ec25-3b19-86ab-ff21a6bdf63c.roa
File:                     0f722f8f-ec25-3b19-86ab-ff21a6bdf63c.roa (raw, json)
Hash identifier:          SPBhWGFGNMo/bAmFPm/gyIBOPbrBK2yt4EqoUi0fGgQ=
Subject key identifier:   D3:AC:94:34:10:00:A1:30:3F:65:21:22:DD:5A:78:A1:87:E9:5D:EB
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC626BDC99CC207DE735FBC0
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/0f722f8f-ec25-3b19-86ab-ff21a6bdf63c.roa
Signing time:             Thu 30 Jul 2026 18:45:51 +0000
ROA not before:           Thu 30 Jul 2026 18:45:51 +0000
ROA not after:            Wed 28 Oct 2026 18:45:51 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:35b::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:6b:dc:99:cc:20:7d:e7:35:fb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:51 2026 GMT
            Not After : Oct 28 18:45:51 2026 GMT
        Subject: CN=968f5fe5-b71a-4c81-b726-d1c1d4a327c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a8:91:86:9c:c1:20:b6:db:6c:a0:cf:8a:8a:
                    47:53:f2:5c:65:e3:13:53:06:9f:3f:31:e6:88:c5:
                    a6:c4:92:d1:bd:78:44:29:ed:94:20:65:2d:2f:3e:
                    ca:e4:11:25:04:b3:bd:05:90:86:63:00:c0:17:d1:
                    0d:4c:57:af:0c:a0:53:4b:ac:cf:f5:aa:14:b2:01:
                    0d:c9:e9:e2:ac:63:ee:76:63:f8:3a:7b:63:7f:60:
                    02:60:fd:cc:43:4b:89:c4:35:f4:87:6e:51:5c:c5:
                    0f:b8:f7:4f:39:1f:cd:ae:6b:3d:60:4f:70:16:37:
                    ec:83:df:b8:16:9e:50:ff:fa:a3:ec:9d:91:bf:49:
                    b8:df:bb:ff:10:25:07:53:81:fe:13:d4:14:97:f3:
                    8a:00:ae:e2:17:67:ef:be:e6:f4:2d:d4:f3:bb:61:
                    a1:c4:71:97:27:b2:9f:ab:32:17:67:d7:eb:86:25:
                    63:73:f1:5d:0d:2a:c0:5d:70:84:cd:6f:f8:8d:31:
                    42:fb:da:43:aa:ab:a1:aa:10:94:db:a9:81:ac:08:
                    a1:1c:8d:98:4b:50:d1:3d:1c:35:0c:73:62:18:ce:
                    e4:4a:59:d2:0b:9f:ce:87:29:f5:ad:89:12:ac:7b:
                    fd:f3:a1:32:32:3a:1b:32:cc:aa:e5:fd:99:68:00:
                    01:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:AC:94:34:10:00:A1:30:3F:65:21:22:DD:5A:78:A1:87:E9:5D:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/0f722f8f-ec25-3b19-86ab-ff21a6bdf63c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:35b::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:45:af:23:2a:bc:5b:de:58:18:45:11:b6:58:9e:24:05:cb:
         ec:62:b6:80:74:19:4e:94:b2:0d:68:7a:97:34:64:ac:30:c1:
         22:5f:a1:c4:e5:37:c5:37:ad:e3:80:9b:f6:0e:e0:be:5b:fa:
         11:c7:be:06:c5:e4:78:bd:dc:e7:94:66:e2:40:a7:22:cc:49:
         de:d2:29:0c:ec:a9:00:20:33:33:eb:e7:ba:c8:28:e2:5a:a8:
         12:58:ef:1c:80:52:dc:a4:cd:cc:2d:92:bd:3e:2e:7f:1b:d8:
         91:59:59:61:6e:8d:7b:87:2d:85:b4:da:a3:17:cd:c3:48:d8:
         aa:df:a0:f1:71:76:ed:92:43:28:99:cb:86:cd:d0:6f:1b:0b:
         cd:f7:ef:61:ca:92:89:60:b0:7e:82:a2:93:fa:10:9e:dc:9e:
         45:0b:36:3a:9c:be:ed:d0:4c:dd:a9:3b:fb:2b:7e:24:98:7e:
         ba:08:59:c3:51:fb:ea:ff:07:99:c4:73:0a:d4:f2:a1:ab:06:
         55:6b:98:9b:91:a3:7b:6a:5a:6c:ac:41:df:bf:1a:bc:a5:32:
         b2:9b:3f:49:01:ed:0d:87:17:f5:a5:7b:22:40:8c:f0:54:ee:
         29:c0:3e:b9:22:c2:be:e8:72:9f:4c:e6:34:28:45:37:fa:32:
         ba:19:a3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:17:19 2026 by rpki-client